## goauthentik/authentik — version/2026.8.0-rc7…version/2026.8.0

_42 commits._

### Features
- **website/docs: 2026.8 release notes: add features and links to docs (cherry-pick #25194 to version-2026.8) (#25201)** (7594f32)
- **website/docs: add OBO (cherry-pick #25149 to version-2026.8) (#25192)** (800d6d9)
- **website/docs: add access requests doc (cherry-pick #24457 to version-2026.8) (#25161)** (1d251f3)
- **website/docs: agents: add doc (cherry-pick #24826 to version-2026.8) (#25150)** (8ae5305)
- **enterprise/endpoints/connectors/agent: add login_hint to auth_ia (cherry-pick #25122 to version-2026.8) (#25124)** (f40d121)
- **website/docs: match UI label capitalization and add a style rule (cherry-pick #25080 to version-2026.8) (#25084)** (8c1d1cf)
- **website/docs: add 2026.8 release note for task status change (cherry-pick #25044 to version-2026.8) (#25045)** (a684a64)
- **sources/saml: add audience override field for SAML sources (cherry-pick #25029 to version-2026.8) (#25033)** (dac0833)
- **website/docs: add object attributes doc (cherry-pick #24437 to version-2026.8) (#24988)** (ce56f24)

### Fixes
- **stages/email: fix test_email ignoring the given stage (cherry-pick #25166 to version-2026.8) (#25190)** (54e2848)
- **website/docs: mark deprecated PostgreSQL options and fix listen settings (cherry-pick #25074 to version-2026.8) (#25083)** (d9c060d)
- **providers/oauth2: fix token exchange provider lookup for actor/subject (cherry-pick #25110 to version-2026.8) (#25116)** (bbb9639)
- **web/user: fix request access URL from agent not working (cherry-pick #25113 to version-2026.8) (#25118)** (5220819)
- **enterprise/requests: fix API schema for grant requests (cherry-pick #25111 to version-2026.8) (#25114)** (8a5f3c4)
- **providers/scim: fix group membership removals (cherry-pick #25024 to version-2026.8) (#25067)** (956a0d3)
- **web: Fix mangled nested CSS in compatibility mode. (cherry-pick #25053 to version-2026.8) (#25063)** (3602a05)
- **web: Fix content_left/right layouts. (cherry-pick #25025 to version-2026.8) (#25030)** (b137eed)
- **web/elements: fix prioritization in form serialization for dotted input-fields (cherry-pick #24987 to version-2026.8) (#24996)** (4dd8f26)
- **web/admin: fix missing preview banner for object attributes (cherry-pick #24982 to version-2026.8) (#24990)** (ccf57ab)
- **providers/oauth2: fix dcr missing csrf_exempt (cherry-pick #24983 to version-2026.8) (#24989)** (79ac0e5)

### Backend
- **release: 2026.8.0** (f3753ec)
- **enterprise: increase cache duration and ensure summary is cached (cherry-pick #25187 to version-2026.8) (#25199)** (d3f4385)
- **providers/radius: allow empty message authenticator (cherry-pick #25097 to version-2026.8) (#25197)** (99bd8a9)
- **core: bump h2 from 0.4.15 to 0.4.16 (cherry-pick #25183 to version-2026.8) (#25186)** (1ff75cb)
- **providers/oauth2: send back-channel logout requests when a user is deactivated (cherry-pick #24718 to version-2026.8) (#25109)** (e23c99b)
- **web: bump dompurify from 3.4.12 to 3.4.13 in /web (cherry-pick #24892 to version-2026.8) (#25002)** (d7b3024)
- **core: delete all user sessions when user is deactivated (cherry-pick #25088 to version-2026.8) (#25104)** (9ac999a)
- **sources/telegram: restore next= redirect after pre_authentication_flow (cherry-pick #22762 to version-2026.8) (#25152)** (f1131c3)
- **core: scope user path_startswith filter to the path subtree (cherry-pick #25093 to version-2026.8) (#25145)** (7f6c960)
- **packages/django-dramatiq-postgres/broker: chunked purge queryset (cherry-pick #25102 to version-2026.8) (#25106)** (9e3b9d3)
- **website/docs: update source field labels renamed in 2026.8 (cherry-pick #25072 to version-2026.8) (#25085)** (9a15578)
- **website/docs: correct proxy unauthenticated path regex reference (cherry-pick #25077 to version-2026.8) (#25082)** (3ee6ab9)
- **core: bump goauthentik/fips-python from 3.14.6-slim-trixie-fips to 3.14.7-slim-trixie-fips in /lifecycle/container (cherry-pick #25049 to version-2026.8) (#25060)** (75a2994)
- **website/docs: preserve host and port in proxy provider nginx redirects (cherry-pick #24991 to version-2026.8) (#25000)** (038054d)
- **outposts/proxy: include query string in post-authentication redirect (cherry-pick #25043 to version-2026.8) (#25058)** (bc3549c)
- **endpoints: handle error in facts (cherry-pick #25028 to version-2026.8) (#25032)** (120c28c)
- **enterprise/stages/source: configurable failure action (cherry-pick #24963 to version-2026.8) (#25027)** (e201407)
- **tasks: aggregate status from logs instead of legacy field (cherry-pick #24792 to version-2026.8) (#25004)** (1f3dcdf)
- **enterprise/endpoints/connectors/fleet: decrease page size (cherry-pick #24995 to version-2026.8) (#24997)** (92c710e)
- **enterprise/requests: optimize db for requestable apps (cherry-pick #24984 to version-2026.8) (#24992)** (4e0ed77)
- **blueprints: emit draft-07 definitions instead of $defs (cherry-pick #24981 to version-2026.8) (#24985)** (f329717)

### Chore
- **ci: require test-rust to pass (cherry-pick #25066 to version-2026.8) (#25068)** (5da1128)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/goauthentik/authentik?utm_source=github-action)._